Malware

Chinese fintech and cryptocurrency organizations have been subjected to attacks spreading the ValleyRAT backdoor via Windows Scheduled Task exploitation and DLL side-loading as part of the Operation Silk Lure cyberespionage campaign, GBHackers News reports.

Android users across India have been subjected to intrusions spreading the reemergent GhostBat RAT malware as part of a new campaign, reports The Cyber Express.

The new TA585 threat group abuses compromised websites and GitHub issues to spread malware.

Novel ChaosBot backdoor examined Attackers have compromised a financial services firm's environment with the newly emergent ChaosBot backdoor late last month, The Hacker News reports.

Malware uses public GitHub repos to store configuration files and redirection instructions.

TechCrunch reports that Israeli spyware firm NSO Group has been purchased by a U.S. investment group led by Hollywood producer Robert Simonds in a deal reportedly worth tens of millions of dollars.

HackRead reports that bogus game and VPN installers have been leveraged to compromise Windows systems with the updated Stealit information-stealing malware, which now exploits Node.js's Single Executable Application feature to bypass detection.